Bug 860421 - subscription-manager refresh throws LdapFluff::FreeIPA::MemberService::UIDNotFoundException
Summary: subscription-manager refresh throws LdapFluff::FreeIPA::MemberService::UIDNot...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Content Management
Version: 6.0.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: Unspecified
Assignee: Katello Bug Bin
QA Contact: Og Maciel
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-09-25 19:15 UTC by james labocki
Modified: 2019-09-26 15:51 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
When using LDAP-based authentication, System Engine was not verifying LDAP roles for auth-less API calls. This caused subscription-manager to fail when refreshing. This fix corrects the verification and now the roles are correctly verified.
Clone Of:
Environment:
Last Closed: 2012-12-04 19:56:36 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:1543 0 normal SHIPPED_LIVE Important: CloudForms System Engine 1.1 update 2012-12-05 00:39:57 UTC

Description james labocki 2012-09-25 19:15:18 UTC 
Description of problem:
subscription-manager will allow a system to register, but the subscription-manager refresh command will fail with an error when using LDAP based authentication in System Engine.

[root@dhcp46-183 ~]# subscription-manager refresh
LdapFluff::FreeIPA::MemberService::UIDNotFoundException



Steps to Reproduce:
1. With local authentication, build a system template and export to cloud engine, build, push.

2. Enable LDAP using the instructions here.
http://documentation-devel.engineering.redhat.com/docs/en-US/CloudForms/1.1/html/Installation_Guide/Configuring_LDAP_for_CloudForms_System_Engine.html

3. Launch instances in Cloud Engine and subscribe them.

[root@dhcp46-183 ~]# subscription-manager register --username=myldapuser --password=redhat --org=cbu --environment=Dev
The system has been registered with id: 861a85ab-b232-44ba-a0d4-caa8e2e5c99e 

4. System registers and is seen 

[root@dhcp46-183 ~]# subscription-manager refresh
LdapFluff::FreeIPA::MemberService::UIDNotFoundException
Comment 2 Jordan OMara 2012-09-26 12:55:34 UTC 
Merged https://github.com/Katello/katello/pull/747
Comment 9 Og Maciel 2012-10-24 13:46:21 UTC 
Verified:

* candlepin-0.7.8.1-1.el6cf.noarch
* candlepin-selinux-0.7.8.1-1.el6cf.noarch
* candlepin-tomcat6-0.7.8.1-1.el6cf.noarch
* katello-1.1.12-17.el6cf.noarch
* katello-all-1.1.12-17.el6cf.noarch
* katello-candlepin-cert-key-pair-1.0-1.noarch
* katello-certs-tools-1.1.8-1.el6cf.noarch
* katello-cli-1.1.8-9.el6cf.noarch
* katello-cli-common-1.1.8-9.el6cf.noarch
* katello-common-1.1.12-17.el6cf.noarch
* katello-configure-1.1.9-8.el6cf.noarch
* katello-glue-candlepin-1.1.12-17.el6cf.noarch
* katello-glue-pulp-1.1.12-17.el6cf.noarch
* katello-qpid-broker-key-pair-1.0-1.noarch
* katello-qpid-client-key-pair-1.0-1.noarch
* katello-selinux-1.1.1-2.el6cf.noarch
* pulp-1.1.14-1.el6cf.noarch
* pulp-common-1.1.14-1.el6cf.noarch
* pulp-selinux-server-1.1.14-1.el6cf.noarch
Comment 12 errata-xmlrpc 2012-12-04 19:56:36 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-1543.html
Note You need to log in before you can comment on or make changes to this bug.